Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TINP/QxiMsfh6VEm00wX-_IMbf-XRxkM.roa
File: QxiMsfh6VEm00wX-_IMbf-XRxkM.roa (raw, json)
Hash identifier: 61BTlDr+szzAIIwdU7Y6/ZMLE2/YvV0W3s+RH0Ojx4g=
Subject key identifier: 43:18:8C:B1:F8:7A:54:49:B4:D3:05:FE:FC:83:1B:7F:E5:D1:C6:43
Certificate issuer: /CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Certificate serial: 0BA1
Authority key identifier: E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/QxiMsfh6VEm00wX-_IMbf-XRxkM.roa
Signing time: Fri 01 Sep 2023 10:01:07 +0000
ROA not before: Fri 01 Sep 2023 10:01:07 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 18049
IP address blocks: 61.67.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2977 (0xba1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E02582B027E57038EA00A3E8484D55DEEA2E1A2A
Validity
Not Before: Sep 1 10:01:07 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=43188CB1F87A5449B4D305FEFC831B7FE5D1C643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:34:f9:1d:7c:2d:e8:f1:d0:a4:05:d6:37:
ee:5f:1c:1b:3f:8c:0f:f1:9c:b5:77:5a:55:fc:f1:
4e:26:1e:4e:7e:d5:5e:fe:76:1b:ed:94:62:5f:17:
e6:33:21:78:23:3c:bd:a0:b6:2b:87:43:41:af:e2:
9d:75:ea:b8:b3:91:71:ce:68:b4:75:fa:7e:54:c0:
ee:af:2b:43:8d:b2:03:c6:93:5c:90:03:a7:86:49:
b5:15:23:79:cf:30:b0:ea:0d:2a:6b:69:d8:93:89:
f7:29:39:ef:68:c1:ed:9b:7b:96:4e:1c:ad:c5:d0:
29:25:01:76:bc:c4:31:d6:55:99:64:41:94:09:cf:
b8:bf:e8:57:c4:65:ee:c0:c9:9f:76:65:66:b3:b7:
f5:80:6c:d1:50:8b:c9:78:03:0d:c6:fa:1c:fd:1c:
74:dd:47:72:6a:7f:d3:3e:27:36:96:f7:10:64:3c:
38:2e:54:45:33:a5:22:28:e8:25:6b:dd:ff:59:45:
48:0e:e0:24:2b:a3:46:73:9e:12:e6:2d:79:b7:8b:
fb:ef:d2:0d:7d:b7:71:3b:58:b7:53:1a:59:06:db:
25:28:d8:d7:97:d5:46:39:45:45:7c:d2:ce:08:07:
25:2d:a7:c5:f3:2e:a5:c5:81:b8:36:92:91:1b:5a:
22:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:18:8C:B1:F8:7A:54:49:B4:D3:05:FE:FC:83:1B:7F:E5:D1:C6:43
X509v3 Authority Key Identifier:
keyid:E0:25:82:B0:27:E5:70:38:EA:00:A3:E8:48:4D:55:DE:EA:2E:1A:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/4CWCsCflcDjqAKPoSE1V3uouGio.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/4CWCsCflcDjqAKPoSE1V3uouGio.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TINP/QxiMsfh6VEm00wX-_IMbf-XRxkM.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
61.67.16.0/20
Signature Algorithm: sha256WithRSAEncryption
45:fb:02:72:2c:53:00:05:f1:01:39:02:0c:84:5d:30:d5:d9:
f4:a6:4d:9d:a9:21:b4:e9:97:b7:13:7a:23:92:5f:c8:0c:7d:
59:3e:22:ef:71:9b:95:89:4e:c0:f4:fd:fd:a3:07:60:31:47:
8a:1b:7b:f7:3e:d7:f2:7c:b2:38:5d:40:ff:68:c3:46:62:d2:
96:77:a8:4e:b7:1a:2a:96:c3:22:5a:a2:e3:8c:3e:12:63:53:
df:20:5e:6e:f5:a6:38:15:cf:19:fb:ed:b8:47:f4:a8:e3:f0:
6f:78:00:d1:91:35:d6:dd:77:6c:ab:ad:42:ac:97:91:08:d7:
51:61:e5:91:66:b6:32:2d:62:c5:85:76:49:a0:10:6d:d0:be:
64:d0:36:e9:bb:c2:09:f1:34:59:e6:de:0c:53:49:95:df:d1:
34:7b:72:81:13:1c:8e:8d:0b:95:cf:ef:08:1f:91:64:34:58:
ed:5b:02:74:9e:25:f2:aa:90:6b:64:c2:02:e8:b2:a1:dc:d1:
0e:b5:06:b2:81:98:eb:d4:d8:cf:d5:7e:6e:38:9e:ee:48:a9:
25:37:1b:9d:ad:71:c4:c1:43:44:0d:6c:db:74:cb:24:ce:19:
d0:ce:bd:5b:44:37:7e:39:c7:e4:de:f2:a7:21:d9:bc:ff:80:
00:f5:62:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 08:57:23 2024 by rpki-client on console-fra.rpki-client.org